Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
File: 9SHhdPhPcWWWHUG2jqcmLigzfWk.mft (raw, json)
Hash identifier: p4/mzFSqWV4hGyOTskbaDuZPJZJ4rM2iwP5OqVUqGqE=
Subject key identifier: CA:BC:03:A8:6A:CC:9B:0F:68:3D:A7:6D:5D:81:12:71:FE:41:38:83
Authority key identifier: F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
Certificate issuer: /CN=f521e174f84f7165961d41b68ea7262e28337d69
Certificate serial: 019F8F7EC4B027D79CECB654AB27DD4238C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
Manifest number: 0347
Signing time: Thu 23 Jul 2026 15:01:17 +0000
Manifest this update: Thu 23 Jul 2026 15:01:17 +0000
Manifest next update: Fri 24 Jul 2026 15:01:17 +0000
Files and hashes: 1: 1-rxopH5LJ9Uzi5ISHJXR-dur0jc.roa (hash: aHfsmVZKRy+7AFPaygX163J+5qjXxNU2emyKoCQGtN0=)
2: 9SHhdPhPcWWWHUG2jqcmLigzfWk.crl (hash: 6TTrjPqRTIGeHdClfxfosLHLbsuf85cNY+czFjj8Txo=)
3: F_pPHJDcrHyVOVWzvhakia7DJiQ.roa (hash: tFJBSOLCH7tZWWFthieckptanNdtDSMnw7UCYwe6+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:c4:b0:27:d7:9c:ec:b6:54:ab:27:dd:42:38:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f521e174f84f7165961d41b68ea7262e28337d69
Validity
Not Before: Jul 23 15:01:17 2026 GMT
Not After : Jul 24 15:01:17 2026 GMT
Subject: CN=cabc03a86acc9b0f683da76d5d811271fe413883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:04:9f:97:03:fb:90:8a:c1:3c:b4:6b:ab:
c4:f0:14:b2:59:34:ba:53:87:33:62:8f:14:90:fb:
6a:84:4b:9c:75:a7:c6:67:70:ad:63:d3:ea:a7:54:
b1:c6:96:bf:74:4e:fe:23:ba:19:e1:7a:75:62:17:
77:12:b2:c2:b6:66:7e:cb:b6:01:c7:ba:9b:2b:fe:
cf:78:68:1b:82:69:af:63:60:ab:66:3f:2b:2b:ef:
48:4d:99:82:be:9b:9f:28:55:27:c3:20:b8:b0:16:
30:d0:41:ac:5a:4f:14:c1:0b:12:dc:2c:47:a9:ab:
bb:38:98:b3:c9:2d:1f:a0:cc:14:00:fa:a3:a7:20:
db:6f:b7:08:c0:ea:9d:09:6b:b4:f2:f3:89:44:d6:
13:e8:a0:95:6b:4a:cf:5c:4a:9b:cd:cb:0b:b9:63:
73:1a:58:56:fb:fc:90:c4:3c:9d:6f:ea:04:92:74:
3f:20:c5:cc:75:99:0c:a8:18:7b:84:7a:cf:30:c7:
a0:c4:6f:a8:b4:ad:66:71:57:09:96:cc:25:55:65:
d3:de:58:71:09:2d:57:f9:d5:ce:a8:53:92:94:24:
6e:33:37:7b:d1:e3:04:b5:2a:d9:9e:d5:59:f8:76:
ec:d2:45:08:1b:db:39:db:9c:29:67:b2:27:b3:4d:
5f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BC:03:A8:6A:CC:9B:0F:68:3D:A7:6D:5D:81:12:71:FE:41:38:83
X509v3 Authority Key Identifier:
keyid:F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d5:5a:68:ad:08:5d:d0:fd:c9:09:1f:c0:49:33:ff:bc:cc:
5f:fd:a6:1c:06:12:18:96:c0:4b:a9:7a:2b:6c:fd:ac:3f:c2:
0f:d2:df:1e:35:ad:a7:d6:f9:e0:12:c3:5c:ac:11:7d:b5:de:
64:70:de:df:ea:07:cd:ff:16:80:58:68:84:4d:4c:07:9d:82:
81:82:bc:3a:a3:7f:96:80:7b:f2:5f:e6:00:c7:1f:0f:17:b5:
6c:42:91:b7:e2:3e:44:6d:e7:df:7c:93:2a:c8:d3:b3:d7:da:
dd:b1:79:54:7a:65:1b:2d:85:29:e4:6c:97:65:f0:05:66:7a:
69:db:0f:ec:e7:12:6b:9c:84:c5:37:54:01:e7:de:ff:f1:31:
90:c0:d3:3c:b9:4a:99:f6:b8:17:fa:6a:2a:ea:53:b9:e7:0f:
02:26:39:d6:50:36:25:16:e9:0b:c1:57:eb:f0:6d:ae:09:20:
cf:ce:a9:65:b7:46:3b:8f:18:6d:ab:46:e9:58:3e:ee:30:36:
58:fa:f6:84:d2:ac:f6:16:60:6e:27:a7:b9:ee:e4:a4:88:d4:
d6:b8:6e:ca:85:87:8b:4e:2c:d9:a6:6d:ea:97:7f:02:05:d8:
0b:e4:25:e5:89:b5:5d:be:70:b6:73:52:3d:60:93:1f:4a:09:
02:95:09:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:27 2026 by rpki-client